Privacy Policy
Last Updated: 30.10.2025
We, Furkan Uzun, residing at No:12 ,Ahm, Usk, Ist ("Ayla," "us," "we," or "our"), are committed to protecting your privacy.
This Privacy Policy applies to the Ayla mobile application and any related services (hereinafter collectively referred to as the "Service") and is incorporated into and subject to our Terms & Conditions.
Data Controller: Furkan Uzun
Address: No:12 ,Ahm, Usk, Ist
Email: fuzundesign@gmail.com
Your use of the Service signifies that you agree with the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use the Service.
A. WHAT DATA DO WE COLLECT?
We collect data necessary to provide and improve our Service, ensuring the safety and functionality you expect from Ayla.
1. Data You Provide Directly:
Account Information: If you create an account, we may collect your name, email address, phone number, and profile photo (if you sign in with Google or Apple).
Emergency Contact Information: To use the core safety feature of the App, you must provide the name and phone number of designated Emergency Contact(s). You confirm that you have obtained prior consent from these persons to provide us with their information and to send them emergency notifications on your behalf.
Family Information: If you create or join a family group using our invite code system, we collect your family membership data, role (e.g., mother, emergency contact), and associated family member information.
Setup Information: We collect information you provide during the onboarding process, such as your baby's age, to help personalize your experience.
Voice Data (Voice Mode Only): When you use Voice Mode, we process your voice input in real-time to provide AI-powered conversational assistance. Voice data is processed through third-party AI services (OpenAI) and is NOT stored permanently by us. Voice data is transmitted securely and used only for the duration of the conversation session.
Feedback and Correspondence: We collect information when you provide feedback or contact us for support. This may include your responses to in-app questions about your experience (e.g., whether you fell asleep or if the alarm was effective).
2. Data We Collect Automatically:
Technical and Usage Data: We collect technical data about your device, such as your device type, operating system version, IP address, unique device identifier, and FCM (Firebase Cloud Messaging) token. We also collect data about your interactions with the Service, such as when a session starts and ends, which mode you use (Voice or Silent), alarm trigger events, and session duration.
Analytics Data: We use third-party analytics services (Mixpanel, AppsFlyer, Facebook App Events) to understand how users interact with our Service. These services may collect device identifiers, usage patterns, and behavioral data.
Crash and Error-Reporting Data: If the Service crashes or hangs, we collect error-reporting information to investigate the error and improve the stability of the Service. These reports include information about your device type and version, the device identifier, the time the error occurred, the feature being used, and the state of the application at that time. These reports do not contain directly identifiable personal information, or only incidentally.
Subscription and Payment Data: If you purchase a subscription through the App, payment processing is handled by Apple App Store or Google Play Store, and we collect subscription status information (e.g., whether you are a Pro user) through Adapty, our subscription management provider. We do not collect or store your payment card information.
3. Children's Data:
The Service is intended for use by adults (18 years and older). We do not knowingly collect personal data from children under 13 (or 16 in the European Economic Area). The information you provide about your baby (such as age) is for personalization purposes only and does not constitute personal data collection from the child. If you are a parent or guardian and believe we have collected information from your child, please contact us immediately.
B. HOW AND ON WHAT LEGAL BASIS DO WE COLLECT YOUR DATA?
We collect and process your personal data based on the following legal grounds:
1. Performance of a Contract:
The majority of our data processing is necessary to provide the Service to you as described in our Terms & Conditions. This includes:
Running the Silent Mode (tap-to-stay-awake) or Voice Mode to monitor your activity.
Detecting inactivity and triggering escalating alarms (vibration, screen flash, audible alarm).
Sending emergency notifications to your designated Emergency Contact(s) when you are detected as potentially asleep.
Managing your account, family group membership, and emergency contact list.
Processing your subscription status to provide Pro features.
2. Your Explicit Consent:
We rely on your consent for specific actions, such as:
Collecting and using the contact information of your Emergency Contact(s). You provide this consent when you add them in the app's settings.
Processing your voice data through third-party AI services (OpenAI) when you use Voice Mode. You provide this consent when you activate Voice Mode.
Sending you push notifications, including critical emergency notifications that may bypass Do Not Disturb settings on your device.
Tracking your app usage for attribution and marketing purposes (App Tracking Transparency on iOS).
Sending you non-essential communications, such as newsletters or promotional offers (if applicable).
3. Our Legitimate Interests:
We process some data to improve our Service, which is in our legitimate interest. This includes:
Analyzing anonymized feedback and usage data to understand how our features are performing.
Investigating and fixing bugs and crashes to ensure app stability.
Conducting analytics to improve user experience and app functionality.
Preventing fraud and ensuring the security of our Service.
4. Compliance with a Legal Obligation:
We may process your data if required to do so by law, including responding to lawful requests from public authorities.
C. TO WHOM DO WE TRANSFER YOUR DATA?
Your privacy is paramount. We do not sell your personal data. We may share it with the following parties only when necessary:
1. Your Emergency Contact(s):
The core function of our Service involves sending emergency notifications (which may include your name, status, and alert details) to your designated Emergency Contact(s) when the app detects prolonged inactivity that may indicate you have fallen asleep while caring for your baby.
2. Service Providers and Third-Party Processors:
We use trusted third-party service providers to help us operate and improve the Service. These providers have access to your data only to perform specific tasks on our behalf and are contractually obligated to protect your data:
Firebase (Google LLC): Authentication, cloud database (Firestore), push notifications (FCM), and cloud functions. Firebase Privacy Policy
OpenAI (for Voice Mode): Real-time voice processing and AI conversational responses. Voice data is transmitted securely and not stored permanently. OpenAI Privacy Policy
Mixpanel: Analytics and user behavior tracking. Mixpanel Privacy Policy
AppsFlyer: Attribution and marketing analytics. AppsFlyer Privacy Policy
Meta/Facebook: App events for analytics. Meta Privacy Policy
Adapty: Subscription and in-app purchase management. Adapty Privacy Policy
3. Family Members:
If you create or join a family group, certain information (your name, role, and activity status) may be visible to other family members within your family group.
4. Legal Authorities and Safety:
We may disclose your information if required by law or in the good-faith belief that such action is necessary to:
Comply with a legal obligation, court order, or government request.
Protect and defend our rights or property.
Prevent or investigate possible wrongdoing in connection with the Service.
Protect the personal safety of users or the public, particularly in emergency situations involving child safety.
5. Business Transfers:
In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity. We will notify you of any such change in ownership or control of your personal data.
D. PROTECTION OF PERSONAL DATA
We implement appropriate administrative, technical, and physical security measures to protect your personal data from unauthorized access, loss, misuse, alteration, or destruction. These measures include:
Encryption of data in transit (TLS/SSL) and at rest where applicable.
Access controls and authentication mechanisms.
Regular security audits and monitoring.
Secure cloud infrastructure (Firebase/Google Cloud Platform).
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.
E. HOW LONG DO WE KEEP YOUR DATA?
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
Account and Emergency Contact Data: Retained as long as your account is active or as long as the contact is designated as your emergency contact. If you delete your account, this data will be deleted within 30 days.
Voice Data: Voice inputs during Voice Mode sessions are processed in real-time and are NOT stored permanently by us. OpenAI may retain voice data temporarily according to their data retention policies (typically 30 days for abuse monitoring).
Technical and Usage Data: May be retained for up to 24 months for analytics and service improvement purposes.
Aggregated/Anonymized Data: We may retain aggregated or anonymized data indefinitely for statistical analysis and service improvement, as this data cannot be used to identify you personally.
We will delete your data upon your request or when it is no longer legally required for us to retain it.
F. YOUR RIGHTS
Depending on your region (particularly if you are in the European Economic Area, United Kingdom, California, or other jurisdictions with comprehensive privacy laws), you have certain legal rights regarding your personal data:
1. Right to Access:
You can request a copy of the personal data we hold about you.
2. Right to Rectification:
You can request that we correct any inaccurate or incomplete data.
3. Right to Erasure (Right to be Forgotten):
You can request that we delete your personal data. Note that we may be required to retain certain information for legal or legitimate business purposes.
4. Right to Restrict Processing:
You can ask us to limit how we use your personal data in certain circumstances.
5. Right to Data Portability:
You can request your data in a structured, commonly used, and machine-readable format to transfer to another service.
6. Right to Object:
You can object to us processing your data for direct marketing or based on our legitimate interests.
7. Right to Withdraw Consent:
Where we rely on your consent to process your data (e.g., for Voice Mode or push notifications), you can withdraw your consent at any time through the app settings or by contacting us.
8. Right to Lodge a Complaint:
If you are in the EEA or UK, you have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.
To exercise any of your rights, please contact us at fuzundesign@gmail.com. We will respond to your request within the timeframe required by law (typically 30 days).
G. INTERNATIONAL DATA TRANSFERS
Our Service is operated from Turkey, and our servers and service providers may be located in different countries, including the United States. By using the Service, you consent to the transfer of your personal data to countries that may have different data protection laws than your country of residence.
We ensure that appropriate safeguards are in place for international data transfers, including:
Standard Contractual Clauses (SCCs) approved by the European Commission for transfers to non-EEA countries.
Relying on service providers that comply with recognized data protection frameworks.
H. CALIFORNIA PRIVACY RIGHTS (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
Right to Know: You can request disclosure of the categories and specific pieces of personal information we have collected about you.
Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
Right to Opt-Out of Sale: We do not sell your personal information, so there is no need to opt-out.
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
To exercise these rights, contact us at fuzundesign@gmail.com.
I. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Service features. The "Last Updated" date at the top of this policy will indicate when changes were made.
Material changes will be communicated to you through:
A prominent notice in the app.
An email notification (if you have provided your email address).
A push notification.
By continuing to use the Service after changes become effective, you agree to be bound by the revised Privacy Policy. If you do not agree with the changes, you should discontinue use of the Service and may request deletion of your account.
J. CONTACT US
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: fuzundesign@gmail.com
Address: No:12 ,Ahm, Usk, Ist
We will respond to your inquiry as promptly as possible, typically within 48 hours for urgent matters and within 30 days for formal data subject requests.
K. IMPORTANT DISCLAIMER REGARDING SERVICE LIMITATIONS
PLEASE READ THIS CAREFULLY:
While we have designed Ayla to help keep you alert while caring for your baby, this Service is NOT a substitute for proper sleep, medical advice, or responsible childcare practices.
The Service should be considered a supplementary safety tool only. We cannot and do not guarantee that:
The app will always detect when you fall asleep.
The alarm will always wake you.
Emergency notifications will always be delivered to your Emergency Contacts.
The Service will function correctly in all circumstances or on all devices.
You use this Service at your own risk. Technical failures, device issues, network problems, or other factors beyond our control may prevent the Service from functioning as intended.
By using this Service, you acknowledge and agree that:
You remain solely responsible for the safety and care of your baby at all times.
You will not rely exclusively on this app for baby safety.
We are not liable for any harm, injury, or loss that may occur while using or relying on this Service.
If you are experiencing excessive fatigue, you should seek proper rest and support rather than relying on this app.
For complete terms of use and liability limitations, please refer to our Terms & Conditions.
By using the Ayla Service, you acknowledge that you have read, understood, and agree to this Privacy Policy.